Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [SECURITY] - autoclosed#4230
Conversation
ℹ️ Artifact update noticeFile name: e2e_cleanup/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
b99cffc to
f7ca6cc
Compare
❌ 2 Tests Failed:
View the top 3 failed test(s) by shortest run time
To view more test analytics, go to the Test Analytics Dashboard |
🔄 Flaky Test DetectedAnalysis: Two different e2e tests failed across different matrix configurations with the same "failed to teardown postgres schema" teardown error, indicating CI environment timing/resource stress rather than a code regression. ✅ Automatically retrying the workflow |
🔄 Flaky Test DetectedAnalysis: TestApiPg/TestTableAdditionWithoutInitialLoad failed due to PostgreSQL SQLSTATE 57P01 (connection terminated by administrator command), a transient infrastructure error caused by the CI environment terminating a catalog connection — not a code regression. ✅ Automatically retrying the workflow |
Pull request was closed
f7ca6cc to
0cabbb9
Compare
🔄 Flaky Test DetectedAnalysis: The test ✅ Automatically retrying the workflow |
🔄 Flaky Test DetectedAnalysis: The e2e test TestPeerFlowE2ETestSuitePG_CH_Cluster/Test_Binary_Format_Hex failed due to a PostgreSQL catalog connection being forcibly terminated (SQLSTATE 57P01: admin_shutdown), a transient CI infrastructure error rather than a test logic failure. ✅ Automatically retrying the workflow |
🔄 Flaky Test DetectedAnalysis: The failure is a transient PostgreSQL catalog connection drop (SQLSTATE 57P01 — "terminating connection due to administrator command") caused by cross-test interference in the 32-way parallel e2e test run, not a bug in the test logic. ✅ Automatically retrying the workflow |
This PR contains the following updates:
v1.95.1→v1.97.3Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
GHSA-xmrv-pmrh-hhx2
More information
Details
CVSSv3.1 Rating: [Medium]
CVSSv3.1 Score: [5.9]
CVSSv3.1 Vector String: [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H]
Summary and Impact
An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame containing a crafted header value type byte outside the valid range, which can cause the host process to terminate.
Impacted versions: < 2026-03-23
Patches
This issue has been addressed in versions 2026-03-23 and above. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.
Workarounds
Not Applicable
References
If you have any questions or comments about this advisory, we ask that you contact [AWS/Amazon] Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.
Severity
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HReferences
This data is provided by the GitHub Advisory Database (CC-BY 4.0).
Release Notes
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/s3)
v1.97.3General Highlights
Module Highlights
github.com/aws/aws-sdk-go-v2: v1.41.5github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.45.12github.com/aws/aws-sdk-go-v2/service/account: v1.30.5github.com/aws/aws-sdk-go-v2/service/acm: v1.37.23github.com/aws/aws-sdk-go-v2/service/acmpca: v1.46.12github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.21github.com/aws/aws-sdk-go-v2/service/amp: v1.42.9github.com/aws/aws-sdk-go-v2/service/amplify: v1.38.14github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.32.20github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.28.20github.com/aws/aws-sdk-go-v2/service/apigateway: v1.39.1github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.29.14github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.34.1github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.13github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.23.22github.com/aws/aws-sdk-go-v2/service/appfabric: v1.16.21github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.12github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.37.7github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.41.14github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.12github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.35.13github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.34.20github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.19.1github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.12github.com/aws/aws-sdk-go-v2/service/apprunner: v1.39.14github.com/aws/aws-sdk-go-v2/service/appstream: v1.54.4github.com/aws/aws-sdk-go-v2/service/appsync: v1.53.5github.com/aws/aws-sdk-go-v2/service/arcregionswitch: v1.6.3github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.22.23github.com/aws/aws-sdk-go-v2/service/artifact: v1.15.5github.com/aws/aws-sdk-go-v2/service/athena: v1.57.4github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.46.12github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.64.4github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.30.14github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.100github.com/aws/aws-sdk-go-v2/service/backup: v1.54.11github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.26.3github.com/aws/aws-sdk-go-v2/service/backupsearch: v1.6.23github.com/aws/aws-sdk-go-v2/service/batch: v1.63.2github.com/aws/aws-sdk-go-v2/service/bcmdashboards: v1.1.4github.com/aws/aws-sdk-go-v2/service/bcmdataexports: v1.14.0github.com/aws/aws-sdk-go-v2/service/bcmpricingcalculator: v1.10.9github.com/aws/aws-sdk-go-v2/service/bcmrecommendedactions: v1.1.5github.com/aws/aws-sdk-go-v2/service/bedrock: v1.57.1github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.52.7github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.15.2github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.25.1github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.51.8github.com/aws/aws-sdk-go-v2/service/bedrockdataautomation: v1.13.5github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime: v1.10.4github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.50.4github.com/aws/aws-sdk-go-v2/service/billing: v1.10.4github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.28.5github.com/aws/aws-sdk-go-v2/service/braket: v1.39.8github.com/aws/aws-sdk-go-v2/service/budgets: v1.43.4github.com/aws/aws-sdk-go-v2/service/chatbot: v1.14.21github.com/aws/aws-sdk-go-v2/service/chime: v1.41.12github.com/aws/aws-sdk-go-v2/service/chimesdkidentity: v1.27.20github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines: v1.26.21github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings: v1.33.15github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.32.17github.com/aws/aws-sdk-go-v2/service/chimesdkvoice: v1.28.13github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.42.4github.com/aws/aws-sdk-go-v2/service/cleanroomsml: v1.22.5github.com/aws/aws-sdk-go-v2/service/cloud9: v1.33.20github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.29.13github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.30.12github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.71.9github.com/aws/aws-sdk-go-v2/service/cloudfront: v1.60.4github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore: v1.12.24github.com/aws/aws-sdk-go-v2/service/cloudhsm: v1.29.21github.com/aws/aws-sdk-go-v2/service/cloudhsmv2: v1.34.21github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.32.12github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain: v1.28.20github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.55.9github.com/aws/aws-sdk-go-v2/service/cloudtraildata: v1.17.13github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.55.3github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.32.23github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.65.0github.com/aws/aws-sdk-go-v2/service/codeartifact: v1.38.21github.com/aws/aws-sdk-go-v2/service/codebuild: v1.68.13github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.21.12github.com/aws/aws-sdk-go-v2/service/codecommit: v1.33.12github.com/aws/aws-sdk-go-v2/service/codeconnections: v1.10.20github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.35.13github.com/aws/aws-sdk-go-v2/service/codeguruprofiler: v1.29.20github.com/aws/aws-sdk-go-v2/service/codegurureviewer: v1.34.20github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.16.24github.com/aws/aws-sdk-go-v2/service/codepipeline: v1.46.21github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.35.13github.com/aws/aws-sdk-go-v2/service/codestarnotifications: v1.31.21github.com/aws/aws-sdk-go-v2/service/cognitoidentity: v1.33.22github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.59.3github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.29.12github.com/aws/aws-sdk-go-v2/service/comprehend: v1.40.21github.com/aws/aws-sdk-go-v2/service/comprehendmedical: v1.31.21github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.49.8github.com/aws/aws-sdk-go-v2/service/computeoptimizerautomation: v1.0.8github.com/aws/aws-sdk-go-v2/service/configservice: v1.62.1github.com/aws/aws-sdk-go-v2/service/connect: v1.166.1github.com/aws/aws-sdk-go-v2/service/connectcampaigns: v1.20.20github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.11.4github.com/aws/aws-sdk-go-v2/service/connectcases: v1.39.1github.com/aws/aws-sdk-go-v2/service/connectcontactlens: v1.33.13github.com/aws/aws-sdk-go-v2/service/connecthealth: v1.0.3github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.36.7github.com/aws/aws-sdk-go-v2/service/controlcatalog: v1.14.9github.com/aws/aws-sdk-go-v2/service/controltower: v1.28.9github.com/aws/aws-sdk-go-v2/service/costandusagereportservice: v1.34.13github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.63.6github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.22.8github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.57.2github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.61.10github.com/aws/aws-sdk-go-v2/service/databrew: v1.39.14github.com/aws/aws-sdk-go-v2/service/dataexchange: v1.40.14github.com/aws/aws-sdk-go-v2/service/datapipeline: v1.30.20github.com/aws/aws-sdk-go-v2/service/datasync: v1.58.2github.com/aws/aws-sdk-go-v2/service/datazone: v1.54.2github.com/aws/aws-sdk-go-v2/service/dax: v1.29.16github.com/aws/aws-sdk-go-v2/service/deadline: v1.26.2github.com/aws/aws-sdk-go-v2/service/detective: v1.38.13github.com/aws/aws-sdk-go-v2/service/devicefarm: v1.38.8github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.40.12github.com/aws/aws-sdk-go-v2/service/directconnect: v1.38.15github.com/aws/aws-sdk-go-v2/service/directoryservice: v1.38.16github.com/aws/aws-sdk-go-v2/service/directoryservicedata: v1.7.21github.com/aws/aws-sdk-go-v2/service/dlm: v1.35.16github.com/aws/aws-sdk-go-v2/service/docdb: v1.48.13github.com/aws/aws-sdk-go-v2/service/docdbelastic: v1.20.13github.com/aws/aws-sdk-go-v2/service/drs: v1.36.13github.com/aws/aws-sdk-go-v2/service/dsql: v1.12.8github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.57.1github.com/aws/aws-sdk-go-v2/service/dynamodbstreams: v1.32.14github.com/aws/aws-sdk-go-v2/service/ebs: v1.33.14github.com/aws/aws-sdk-go-v2/service/ec2: v1.296.1github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect: v1.32.20github.com/aws/aws-sdk-go-v2/service/ecr: v1.56.2github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.38.13github.com/aws/aws-sdk-go-v2/service/ecs: v1.74.1github.com/aws/aws-sdk-go-v2/service/efs: v1.41.14github.com/aws/aws-sdk-go-v2/service/eks: v1.81.2github.com/aws/aws-sdk-go-v2/service/eksauth: v1.12.13github.com/aws/aws-sdk-go-v2/service/elasticache: v1.51.13github.com/aws/aws-sdk-go-v2/service/elasticbeanstalk: v1.34.2github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing: v1.33.23github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2: v1.54.10github.com/aws/aws-sdk-go-v2/service/elasticsearchservice: v1.39.2github.com/aws/aws-sdk-go-v2/service/elementalinference: v1.0.3github.com/aws/aws-sdk-go-v2/service/emr: v1.59.0github.com/aws/aws-sdk-go-v2/service/emrcontainers: v1.40.17github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.39.6github.com/aws/aws-sdk-go-v2/service/entityresolution: v1.26.5github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.45.23github.com/aws/aws-sdk-go-v2/service/evs: v1.6.4github.com/aws/aws-sdk-go-v2/service/finspace: v1.33.21github.com/aws/aws-sdk-go-v2/service/finspacedata: v1.33.21github.com/aws/aws-sdk-go-v2/service/firehose: v1.42.13github.com/aws/aws-sdk-go-v2/service/fis: v1.37.20github.com/aws/aws-sdk-go-v2/service/fms: v1.44.22github.com/aws/aws-sdk-go-v2/service/forecast: v1.41.21github.com/aws/aws-sdk-go-v2/service/forecastquery: v1.29.21github.com/aws/aws-sdk-go-v2/service/frauddetector: v1.41.12github.com/aws/aws-sdk-go-v2/service/freetier: v1.13.14github.com/aws/aws-sdk-go-v2/service/fsx: v1.65.7github.com/aws/aws-sdk-go-v2/service/gamelift: v1.51.3github.com/aws/aws-sdk-go-v2/service/gameliftstreams: v1.11.1github.com/aws/aws-sdk-go-v2/service/geomaps: v1.9.4github.com/aws/aws-sdk-go-v2/service/geoplaces: v1.8.5github.com/aws/aws-sdk-go-v2/service/georoutes: v1.7.14github.com/aws/aws-sdk-go-v2/service/glacier: v1.32.6github.com/aws/aws-sdk-go-v2/service/globalaccelerator: v1.35.15github.com/aws/aws-sdk-go-v2/service/glue: v1.139.1github.com/aws/aws-sdk-go-v2/service/grafana: v1.33.4github.com/aws/aws-sdk-go-v2/service/greengrass: v1.32.21github.com/aws/aws-sdk-go-v2/service/greengrassv2: v1.42.12github.com/aws/aws-sdk-go-v2/service/groundstation: v1.40.4github.com/aws/aws-sdk-go-v2/service/guardduty: v1.74.2github.com/aws/aws-sdk-go-v2/service/health: v1.37.4github.com/aws/aws-sdk-go-v2/service/healthlake: v1.36.13github.com/aws/aws-sdk-go-v2/service/iam: v1.53.7github.com/aws/aws-sdk-go-v2/service/identitystore: v1.36.5github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.51.4github.com/aws/aws-sdk-go-v2/service/inspector: v1.30.20github.com/aws/aws-sdk-go-v2/service/inspector2: v1.47.4github.com/aws/aws-sdk-go-v2/service/inspectorscan: v1.13.5github.com/aws/aws-sdk-go-v2/service/internetmonitor: v1.26.14github.com/aws/aws-sdk-go-v2/service/invoicing: v1.9.8github.com/aws/aws-sdk-go-v2/service/iot: v1.72.5github.com/aws/aws-sdk-go-v2/service/iotdataplane: v1.32.21github.com/aws/aws-sdk-go-v2/service/iotdeviceadvisor: v1.36.21github.com/aws/aws-sdk-go-v2/service/iotevents: v1.33.13github.com/aws/aws-sdk-go-v2/service/ioteventsdata: v1.30.12github.com/aws/aws-sdk-go-v2/service/iotfleetwise: v1.31.20github.com/aws/aws-sdk-go-v2/service/iotjobsdataplane: v1.30.13github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations: v1.8.4github.com/aws/aws-sdk-go-v2/service/iotsecuretunneling: v1.33.21github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.52.19github.com/aws/aws-sdk-go-v2/service/iotthingsgraph: v1.30.21github.com/aws/aws-sdk-go-v2/service/iottwinmaker: v1.29.21github.com/aws/aws-sdk-go-v2/service/iotwireless: v1.54.9github.com/aws/aws-sdk-go-v2/service/ivs: v1.48.14github.com/aws/aws-sdk-go-v2/service/ivschat: v1.21.20github.com/aws/aws-sdk-go-v2/service/ivsrealtime: v1.33.1github.com/aws/aws-sdk-go-v2/service/kafka: v1.49.2github.com/aws/aws-sdk-go-v2/service/kafkaconnect: v1.30.4github.com/aws/aws-sdk-go-v2/service/kendra: v1.60.21github.com/aws/aws-sdk-go-v2/service/kendraranking: v1.15.25github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.25.4Configuration
📅 Schedule: (in timezone Etc/UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.